Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FCB6062DDA511F1B3B4F4FDCE1D38B0.roa
File:                     5FCB6062DDA511F1B3B4F4FDCE1D38B0.roa (raw, json)
Hash identifier:          TdNZc98sxmp3Up0q4BXOTj3tFQtvAO2DVQOxpjCemDE=
Subject key identifier:   67:98:85:92:15:41:26:78:2D:57:FC:8E:55:92:83:77:FE:C2:48:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E4AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FCB6062DDA511F1B3B4F4FDCE1D38B0.roa
Signing time:             Wed 11 Nov 2026 07:56:18 +0000
ROA not before:           Wed 11 Nov 2026 07:56:13 +0000
ROA not after:            Wed 10 Nov 2027 07:56:13 +0000
asID:                     328608
IP address blocks:        156.253.250.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.251.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.252.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.253.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.254.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.255.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.80.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.81.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.82.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.83.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124074 (0x1e4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 07:56:13 2026 GMT
            Not After : Nov 10 07:56:13 2027 GMT
        Subject: CN=6af41fa1-9d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:a8:bd:7e:59:9b:7c:4c:01:8c:81:c4:4a:
                    7a:55:bf:09:96:5e:6e:90:37:5b:9b:fe:97:71:f6:
                    01:e0:9d:da:05:87:6d:4f:d0:bf:ea:26:6f:00:79:
                    f2:8b:2a:9c:93:0f:93:18:7f:84:7d:3a:21:56:f9:
                    b5:47:40:09:5d:a1:4b:4e:43:d1:49:f3:79:02:58:
                    13:3e:99:30:7b:ea:70:9a:78:17:d6:3a:e3:35:76:
                    ff:1c:c6:61:a3:86:12:be:d9:3b:c0:b4:22:09:85:
                    94:a3:f9:6e:f6:62:d3:d9:d7:1d:28:0a:92:2a:a6:
                    7b:b8:c0:ac:9e:76:94:91:c8:21:05:f1:bd:36:5e:
                    9a:1b:e1:4c:39:15:58:6f:98:7a:17:79:3b:fd:1f:
                    cb:85:fd:ef:bf:9b:48:64:30:ef:52:f1:14:01:20:
                    0c:85:8d:0f:3f:c6:df:5f:20:82:d3:06:59:a3:84:
                    4c:f8:68:80:6b:36:ac:a8:2a:e6:26:fa:f7:61:f6:
                    9a:44:fc:e9:01:7d:7e:f4:38:b0:e9:78:67:23:11:
                    32:40:7b:40:fc:12:e7:f3:55:57:eb:f9:7d:b7:1b:
                    32:ee:39:cf:8f:f9:34:c8:24:94:59:44:53:0f:83:
                    ec:d6:61:57:37:2e:dc:8c:df:f1:c5:d4:ff:ef:ed:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:98:85:92:15:41:26:78:2D:57:FC:8E:55:92:83:77:FE:C2:48:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FCB6062DDA511F1B3B4F4FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.250.0-156.253.255.255
                  156.255.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:03:71:02:65:b7:c6:92:af:87:78:46:4a:b6:ff:6c:03:91:
         1a:07:34:41:a8:26:56:ad:df:31:1b:44:2a:a1:76:71:f3:0d:
         2a:17:4f:0d:9a:b2:9c:8a:d5:85:4a:10:16:8a:a5:f4:95:c3:
         ff:ed:ca:79:25:75:be:56:50:3e:2a:37:fe:c3:d6:27:9c:d2:
         f2:a4:78:ce:c8:3b:ae:46:0d:91:e8:f5:4a:aa:62:2c:a7:a6:
         8c:cf:0e:64:a8:b1:c7:7d:ba:44:68:ee:a8:50:98:12:6c:8a:
         cd:85:ab:e5:4b:7f:b8:8e:b7:70:ab:a5:25:b0:6e:9c:9e:bd:
         7f:49:1b:1f:1a:fb:a0:5a:67:e1:44:63:76:e9:cf:2b:af:26:
         50:ec:e7:7f:c2:92:5c:57:cf:ac:81:82:e5:26:09:29:a8:60:
         b6:ce:aa:53:86:ca:6e:3b:c2:9c:1d:98:fa:76:be:7a:96:c0:
         ba:97:5b:7e:36:36:d0:b6:f6:69:ad:11:c1:61:90:50:15:46:
         24:5b:ce:b6:89:e9:00:fa:f8:ee:f3:72:2e:e1:63:57:a1:f4:
         e8:4f:d0:bf:67:39:93:4f:43:fd:b0:5e:e0:57:0a:bd:5c:1d:
         82:82:5f:c8:55:f8:af:69:6f:87:25:c1:23:24:a9:45:3b:dd:
         e2:6a:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----